Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc8d7bda-f571-33b3-b62a-add4f027eca3.roa
File:                     dc8d7bda-f571-33b3-b62a-add4f027eca3.roa (raw, json)
Hash identifier:          MSLITUfMXCCcyyvimYFRzu5Ty7FqbEIkiZsvIQQP2D4=
Subject key identifier:   BD:34:6C:90:3B:8C:19:D3:01:FC:15:09:59:49:0C:E3:E7:39:3F:C4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EB57C54E24B5CFD0F7C143A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc8d7bda-f571-33b3-b62a-add4f027eca3.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     396550
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:54:e2:4b:5c:fd:0f:7c:14:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=4a14eeb2-4487-44f0-a3c5-437d554cc153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a2:4c:ed:a6:46:e7:e2:12:24:05:68:8d:31:
                    d3:2e:b4:b5:24:00:1e:10:74:e6:cf:68:ac:05:1e:
                    7a:8b:57:bd:3e:9e:ef:60:4b:be:87:03:36:75:5e:
                    d1:8b:66:d6:6b:2f:c0:54:a6:87:08:c8:18:b6:3c:
                    e6:47:45:17:8a:b3:b4:1d:32:af:51:c6:8e:19:ce:
                    7f:25:85:0e:5e:cc:50:52:fa:41:77:4e:71:2d:fa:
                    f0:8e:3f:13:e4:fb:ea:84:ab:7e:92:a1:7e:e2:9c:
                    21:ed:8e:09:ad:53:53:2e:75:28:f3:0a:c9:dd:d0:
                    7b:38:43:84:0d:51:ea:ad:fa:6f:3f:f4:73:4c:16:
                    85:32:37:dc:3a:0b:5c:d2:74:44:bb:c3:71:a1:13:
                    13:c3:c1:a4:5c:1c:3f:a0:cf:32:fb:37:b1:28:02:
                    b6:04:a6:52:d7:8b:e4:b8:90:6c:a4:97:49:00:f5:
                    e1:52:a1:23:27:36:d7:20:4d:0d:9c:b5:7e:3f:86:
                    b4:58:c8:0a:7a:12:ec:13:8a:13:3b:f1:e4:9f:1c:
                    a4:a2:d8:b3:3f:7d:b1:56:24:31:6c:b9:09:0a:01:
                    6b:35:ab:27:77:88:fc:71:28:a5:26:2e:3f:14:fa:
                    5f:e9:1e:06:ef:e7:18:6f:2a:c4:0c:bb:1d:0b:c8:
                    5a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:34:6C:90:3B:8C:19:D3:01:FC:15:09:59:49:0C:E3:E7:39:3F:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc8d7bda-f571-33b3-b62a-add4f027eca3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:04:ef:a0:90:07:3f:d0:d6:82:39:5b:5e:ce:26:1a:4a:c7:
         55:90:3e:eb:8c:f8:9b:5d:43:ea:5d:03:b7:23:91:d6:29:3a:
         2e:96:79:2e:a2:28:5a:6d:49:4c:f7:ae:16:d5:74:2e:db:fc:
         39:fe:5c:55:86:47:fb:e4:c6:66:20:92:f4:cf:25:24:a1:3d:
         39:a5:4c:07:de:ac:5c:f8:e7:09:a6:22:69:db:ee:d1:56:ef:
         7d:96:bd:ac:c7:f7:ac:cf:3c:14:f2:e7:48:15:42:74:72:35:
         a1:48:3d:71:64:9b:34:10:a5:6c:39:64:69:22:4b:1e:d3:28:
         2b:40:de:b0:f2:46:06:09:4a:35:ee:e4:5e:8e:f4:a4:1d:99:
         a1:fb:d2:0b:1a:11:d5:c3:91:6a:41:a6:fe:87:39:46:fb:f5:
         9d:14:fc:ae:1d:c7:f8:c2:59:30:8b:5a:00:a9:04:3b:14:16:
         22:2a:37:f8:8e:28:be:1b:1f:0f:c4:e8:60:e0:73:70:b2:e1:
         a7:67:3e:36:db:fd:af:b8:57:e1:3b:9f:3a:7e:ab:ac:7d:d3:
         24:fc:1d:97:0f:37:3d:09:bb:9c:5d:3f:46:3f:19:25:71:da:
         0c:d1:c0:af:dd:c0:5d:ca:dd:18:89:d3:e3:cf:ce:4a:a6:c0:
         67:5d:2e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:46:47 2026 by rpki-client